Subject: [keyassure] who vs what

From: [email-masked]
Date: Fri, 27 Aug 2010 17:44:58 +0000

This idea has been alluded to in other threads; there are even a couple
of drafts in circulation on one aspect of this idea.  It might have even
have been the premise of the bar-bof, the ensueing charter and work todate.

The idea?

	That the CERT/DKIM etc RR is targeted at a given app that
	may or may not be running on a given target.  EG  - WHAT

Is there any value in this?

	That the CERT is targeted at the given target.  EG  - WHO

I would like to think there is value in crypto certification that a target
node is whom it says it is - with other keys/hashes/app-specific crypto
as adjuncts to the RRset.  In this way, we don't have the "portmanteau"
effect of a given crypto bundle identifying both WHO and WHAT.

Or am I just being problematic?

--bill